Thousands of GitHub, AWS, Docker tokens exposed in Travis CI logs

By Ionut Ilascu, Bleeping Computer

For a second time in less than a year, the Travis CI platform for software development and testing has exposed user data containing authentication tokens that could give access to developers’ accounts on GitHub, Amazon Web Services, and Docker Hub.

Researchers at Aqua Security discovered that “tens of thousands of user tokens” are exposed through the Travis CI API that offer access to more than 770 million logs with various types of credentials belonging to free tier users.


Comments

Post a Comment

Popular posts from this blog

Ukraine targeted by DDoS attacks from compromised WordPress sites

Image
By Bill Toulas, Bleeping Computer Ukraine's computer emergency response team (CERT-UA) has published an announcement warning of ongoing DDoS (distributed denial of service) attacks targeting pro-Ukraine sites and the government web portal. The threat actors, who at this time remain unknown, are compromising WordPress sites and injecting malicious JavaScript code to perform the attacks. These scripts are placed in the HTML structure of the main files of the website and are base64-encoded to evade detection. The code runs on the website visitor's computer and directs their available computational resources to generate an abnormal number of requests to attack objects (URLs) defined in the code. The result is that some of the target websites are overwhelmed by the requests and, as a result, rendered inaccessible to their regular visitors. This all happens without the owners or the visitors of the compromised sites ever realizing it, except for maybe some barely noticeable performan...
Read more

How to Pass On Your Passwords When You Die

By Dalvin Brown, Wall Street Journal Just as you set up a living will or a power of attorney, it’s a good idea to set up your online accounts so that someone else can access them after you’ve passed on. It’s no fun to think about a day when we’re no longer here, but facing reality can save work and heartache for relatives and heirs. If you haven’t set up digital-legacy contacts or other means to share accounts after your death, your heirs typically have to go through a lengthy process to gain access to your data. In some cases, such as with some password managers, there may be no way for heirs to gain access unless you take steps in advance. Read on
Read more

How to Downgrade From Windows 11 to Windows 10

Image
Not a fan of Microsoft's newest operating system? You can go back to Windows 10, but you only have a certain number of days to revert your OS. By Lance Whitney, PC Mag You’ve upgraded from Windows 10 to Windows 11 and now realize you’re not that crazy about Microsoft's newest operating system. Maybe you don’t like the new Start menu or taskbar. Perhaps you miss certain built-in apps or features. Or maybe you just miss the familiarity of Windows 10. Whatever the reason, you can jump back to the older OS. Microsoft gives you 10 days to revert from Windows 11 to 10. However, there is a way to extend that deadline. Here's how to return to the comfort of Windows 10. Downgrade Within 10 Days Let’s say you upgraded to Windows 11 fewer than 10 days ago and want to go back to Windows 10. That’s easy enough. Go to Settings > System > Recovery . In the Recovery options section, you should see Go back: If this version isn't working, try going back to Windows 10 . Before you m...
Read more